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Amendments to the Claims: 

This listing of claims will replace all prior versions, and listings, of claims in the application: 
Listing of Claims: 

1 . (Currently Amended) A method of enforcing encryption on a public wireless 
local area network , the public wireless local area network comprising: 

at least one access point for the wireless connection of corresponding user 

terminals, 

an authentication, authorization and accounting system; and 

at least one access control point for controlling access to the network, for 

wirelessly connecting a user terminal at an access point; 

initiating an authentication, authorization and accounting procedure for the 
user terminal by an access control point for controlling access to the public wireless local area 
network; an accessing tormiak and for providing an Internet access gateway functionality; the 
method comprising: 

authenticating a user terminal to the authentication, authorization and accounting 
system upon arrival in a service area of the public wireless local area network; 

requesting access to the Internet by the user terminal; and 

enforcing applications corresponding to the Internet access request of the user 
terminal to switch their 

accessing to an application via the Internet by the user terminal; 

providing an Internet access gateway functionality by the access control point; and 
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enforcing the application to switch its traffic to an encrypting security service port by 
the access control point . 

2. (Original) The method according to claim 1, wherein the encrypting security 
service is the secure sockets layer or the transport layer security. 

3. (Cancelled) 

4. (Cancelled) 

5. (Currently Amended) The method according to claim 1, further comprising: 

retrieving information by the access control point from RADIUS messages which user 
terminals do whether a user terminal does not use a 802. 1 li encryption; and 

directing the traffic encryption enforcement only to the such identified user terminals 

performing the enforcing to the application if it is accessed by such a user terminal. 

6. (Currently Amended) The method according to claim 1, wherein the enforced 
applications are selected from application can be one of a group comprising the hypertext 
transfer protocol for browsing the Internet, the Internet message access protocol 4, the post 
office protocol 3, and the simple mail transfer protocol. 

7. (Currently Amended) A system for enforcing encryption on a public wireless 
local area network, comprising at least one a user terminal- and a public wireless local area 
network, which comprises: 

at least one an access point for the wireless connection of a configured to wirelessly 
connect the user terminal; 

an authentication, authorization and accounting subsystem; and 

at least one an access control point for controlling configured to control access to the 
public wireless local area network, for initiating to initiate an authentication, authorization 
and accounting procedure for a the user terminal , to provide at the authentication, 
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authorization and accounting sub system upon its arrival in a service area of tho public 
wireless local area network, for providing an Internet access gateway functionality, and for 
enforcing applications corresponding to an Internet access request of to enforce an application 
accessed by the user terminal via the Internet to switch their its traffic to an encrypting 
security service port. 

8. (Original) The system according to claim 7, wherein the encrypting security 
service is the secure sockets layer or the transport layer security. 

9. (Currently Amended) The system according to claim 7, wherein the access 
control point is further configured to retrieve retrieves information from RADIUS messages 
which user terminals do whether the user terminal does not use a 802. Hi encryption and 
directs tho traffic encryption onforcomont only to tho such identified user terminals to enforce 
the application if it is accessed by such a user terminal . 

10. (Currently Amended) An access control point network element for enforcing 
encryption on a public wireless local area network, comprising: A network element 
configured to 

control access to a public wireless local area network means for controlling access to 
tho network ; 

means for initiating initiate an authentication, authorization and accounting procedure 
for a user terminal at an authentication, authorization and accounting sub system of tho public 
wireless local area network upon arrival of the user terminal in a service area of the public 
wireless local area network ; 

means for providing provide an Internet access gateway functionality; and 

moans for enforcing applications corresponding to an Internet access request of 
enforce an application accessed to by the user terminal via the Internet to switch its their 
traffic to an encrypting security service port. 
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1 1 . (Original) The network element according to claim 10, wherein the encrypting 
security service is the secure sockets layer or the transport layer security. 

12. (Currently Amended) The network element according to claim 10, further 
configured to comprising: 

moans for retrieving retrieve information from RADIUS messages whether the user 
terminal does which user terminals do not use a 802. 1 li encryption; and 

moans for directing the traffic encryption enforcement only to the such identified user 
terminals enforce the application if it is accessed by such a user terminal . 
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